Collaborate Disseminate
So I work for a company where I make and receive phone calls and connect to remote servers and workstations. I work from home, use a company laptop and connect to the company’s network via software VPN . The hardware setup i… Continue reading Work from home, remote monitoring software, vpn, privacy
Executive Order 13526 section 1.2. Specifies Information may be classified as Top Secret, Secret, and Confidential. The absense of a classification is Unclassified.
US Classification Levels are used to mark the classification level of do… Continue reading Is there a specification for the color values representing information classification levels for the United States? [closed]
My company permits remote access with authentication that includes:
username
password/phrase (20+ characters)
User selected PIN + RSA SecurID token code
Our passwords are required to be changed every 6 weeks, and of cours… Continue reading Pin change policy for RSA SecurID
A few of my teammates received an infosec violation notice for using the login ID of one of the members to access a database tool (it usually takes 24 hrs to get the ticket approved, so many times if one of teammate gets the … Continue reading Infosec Violation Notice
I have an existing on premise infrastructure which I’m considering moving to Azure. On that platform, there are products that enhance my security, presumably by collecting metadata (IP, session, etc).
Right now I have a priv… Continue reading How does the use of Microsoft-branded Azure products affect my privacy policy?
When performing penetration testing for work, I often have to turn off Symantec Endpoint Protection in order to use certain payloads with Burp Suite and I recently had to do this for something as simple as WPScan (in a Kali V… Continue reading How do I configure Symantec AV to permit pentesting tools without compromising my organization’s network and my host computer?
When performing penetration testing for work, I often have to turn off Symantec Endpoint Protection in order to use certain payloads with Burp Suite and I recently had to do this for something as simple as WPScan (in a Kali V… Continue reading How do I configure Symantec AV to permit pentesting tools without compromising my organization’s network and my host computer?
I have been tasked with coming up with if we should or should not allow Amazon Echo/Dot devices on our network.
Below is the reasons I have come up with so far. This is still the rough list.
The amazon Echo/Dot cannot be m… Continue reading Amazon Echo/Dot on your network
At work, my employer uses a self-signed root certificate to MITM all of our SSL/TLS traffic. Many of our internal certificates used by various micro-services and internal websites are also signed by this certificate.
Want to perform VA/PT for Cyberoam Firewall in company. What methods or tools to be used.
Continue reading Firewall – Vulnerability Assessment and Penetration Testing [on hold]